CPE
The Java-platform msgpack gem for JRuby in versions prior to 1.8.7 allocated memory based on sizes declared in MessagePack headers before verifying availability, potentially causing JVM heap exhaustion when processing crafted input.